CVE Catalog
CVE-2026-40412
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk0.53%
42th percentile - higher than 42% of all known CVEs
Summary
Unrestricted upload of dangerous file types in Azure Orbital Spatio allows an unauthorized attacker to execute code remotely over the network.
Risk Assessment
An attacker could take control of the Azure Orbital Spatio service, leading to compromise of confidentiality, integrity, and availability, as well as further attacks on cloud infrastructure.
Recommendation
Implement file type validation and upload restrictions. Apply the latest security patches from Microsoft.
Original NVD description (English source)
Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network.